Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-45384
HistoryNov 15, 2022 - 8:15 p.m.

Design/Logic Flaw

2022-11-1520:15:00
PRIOn knowledge base
www.prio-n.com
3
jenkins
reverse proxy
authentication
ldap
manager
password
unencrypted
global config
file system
security flaw

0.001 Low

EPSS

Percentile

28.4%

Jenkins Reverse Proxy Auth Plugin 1.7.3 and earlier stores the LDAP manager password unencrypted in the global config.xml file on the Jenkins controller where it can be viewed by attackers with access to the Jenkins controller file system.

CPENameOperatorVersion
reverse_proxy_authlt1.7.4

0.001 Low

EPSS

Percentile

28.4%

Related for PRION:CVE-2022-45384